root/pypi: links for legitimate-package